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Abstract 

This paper studies quantum refereed games, which are quantum interactive proof systems 
with two competing provers: one that tries to convince the verifier to accept and the other that 
tries to convince the verifier to reject. We prove that every language having an ordinary quan- 
tum interactive proof system also has a quantum refereed game in which the verifier exchanges 
just one round of messages with each prover. A key part of our proof is the fact that there exists 
a single quantum measurement that reliably distinguishes between mixed states chosen arbi- 
trarily from disjoint convex sets having large minimal trace distance from one another. We also 
show how to reduce the probability of error for some classes of quantum refereed games. 

1 Introduction 

A refereed game consists of a conversation between a computationally bounded verifier and two 
computationally unbounded provers regarding some input string x. The two provers use their 
unbounded computational power to compete with each other: one prover, called the yes-prover, 
attempts to convince the verifier to accept x, while the other prover, called the no-prover, attempts 
to convince the verifier to reject x. At the end of the interaction, the verifier decides whether to 
accept or reject the input x, effectively deciding which of the provers wins the game. Such games 
represent games of incomplete information; the messages exchanged between one prover and the 
verifier are considered to be hidden from the other player. 

A language L is said to have a refereed game with error e if there is a polynomial-time verifier 
satisfying the following conditions. For each string x E L, there exists a yes-prover that can always 
convince the verifier to accept x with probability at least 1— e, regardless of the no-prover's strategy, 
and for each x ^ L, there exists a no-prover that can always convince the verifier to reject x with 
probability at least 1 — e, regardless of the yes-prover's strategy. A turn for one of the provers 
consists of a message from the verifier to that prover, followed by a response from that prover back 
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to the verifier. One may consider the case where the provers' turns are played sequentially or in 
parallel. 

The refereed games model is based on the interactive proof system model lfTTl l2"ll31flll. which 
has a rich history that we will not survey here. The refereed games model, and variations on this 
model, were considered in the classical case in Refs. ifTTl 151 171 fT4l l9l 151. among others. Much 
of what is known about the complexity-theoretic aspects of the classical refereed games model is 
due to Feige and Kilian [6|. The class of languages having classical refereed games in which the 
provers may play any polynomial number of turns coincides with EXP (deterministic time 2 P ^ for 
some polynomial p). The simulation of EXP by a polynomial-turn refereed game is due to Feige 
and Kilian 0, and is based on arithmetization technique developed by Lund, Fortnow, Karloff 
and Nisan lTT3Tl and used in proofs of IP = PSPACE ll2"Ul |2~T1. The simulation of polynomial- 
turn refereed games in EXP is due to Koller and Megiddo ifbUl . On the other hand, the class of 
languages having games in which the provers play precisely one turn each, with the turns played 
in parallel, coincides with PSPACE [6|. Apparently little is known about the expressive power 
of classical refereed games intermediate between these two extremes. For instance, games with 
a constant number of prover turns may correspond to PSPACE, EXP, or some complexity class 
between the two. 

Similar to the classical case, quantum refereed games are based on the quantum interactive 
proof system model f52lfT3ll . Quantum refereed games differ from classical ones in that the provers 
and the verifier may perform quantum computations and exchange quantum messages. Our two 
main motives for considering the quantum refereed games model are to better understand the power 
of quantum interactive proof systems and to examine the effect of quantum information on the 
complexity of finding strategies for two-player games. 

The main result of this paper establishes that any language having a quantum interactive proof 
system also has a quantum refereed game with exponentially small probability of error wherein 
each prover plays just one turn (with the yes-prover playing first). An interesting fact about the 
resulting game from the point of view of understanding quantum interactive proofs is that entan- 
glement between the provers and the verifier does not play any role in this game. More specifically, 
the game we define has the following general form: the yes-prover sends the verifier a mixed quan- 
tum state, the verifier processes this state and sends some state to the no-prover, and the no-prover 
measures the state and sends a classical result to the verifier. The verifier checks the result of the 
measurement and accepts or rejects. 

A key ingredient for our result is an information-theoretic assertion stating that there exists a 
quantum measurement that can reliably distinguish between states chosen from two disjoint convex 
sets of quantum states. This assertion generalizes a well-known fact about the relation between the 
trace distance between two states and their distinguishability, and may be viewed as a quantitative 
version, from the point of view of quantum information theory, of the fact from convex analysis 
that disjoint convex sets are separated by some hyperplane. 

The remainder of this paper is organized as follows. We begin by defining quantum refereed 
games in Section|2j In Section|3]we prove the fact concerning measurements distinguishing convex 
sets mentioned previously. Using this fact, we then prove in Section |4| that a two-turn quantum 
refereed game exists for any language having a quantum interactive proof system. In Section[5]we 
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describe a method for error reduction in two-turn quantum refereed games. The paper concludes 
with Section which mentions some open problems. 

2 Definitions 

In this section we define the quantum refereed games model and some complexity classes based 
on this model. Throughout the paper we assume all strings are over the alphabet £ = {0, 1}. For 
x E £*, \x\ denotes the length of x. We let poly denote the set of polynomial-time computable 
functions / : N — » N \ {0} for which there exists a polynomial p such that f{n) < p{n) for 
all n. We also let 2~ poly denote the set of polynomial-time computable functions e such that 
e(n) = 2~f( n ^ for all n for some / £ poly. 

The model for quantum computation that provides a basis for quantum refereed games is the 
quantum circuit model, with which we assume the reader is familiar. As mentioned in Section [H a 
quantum refereed game has a verifier V and two competing provers Y and N. Each of V, Y, and iV 
is defined by a mapping on input strings x E S* where V(x), Y(x), and N(x) are each sequences 
of quantum circuits. The circuits in these sequences are assumed to be composed only of gates 
taken from some universal set of quantum gates. Thus, each of the circuits implements a unitary 
operation on its input qubits. However, we lose no generality by allowing only unitary operations 
because arbitrary admissible quantum operations, including measurements, can be simulated by 
unitary circuits as described in Ref. [J). 

For each prover, the qubits upon which that prover's circuits act are partitioned into two sets: 
one set of qubits is private to that prover and the other is shared with the verifier. These shared 
qubits act as a quantum channel between the verifier and that prover. No restrictions are placed on 
the complexity of the provers' circuits, which captures the notion that the provers' computational 
power is unbounded — each of the provers' circuits can be viewed as an arbitrary unitary operation. 

The qubits on which the verifier's circuits act are partitioned into three sets: one set is private to 
the verifier and two sets are shared with each of the provers. One of the verifier's private qubits is 
designated as the output qubit. At the end of the game, acceptance is dictated by a measurement of 
the output qubit in the computational basis. We also require that the verifier's sequence of circuits 
V(x) be generated by a polynomial-time Turing machine on input x. This uniformity constraint 
captures the notion that the verifier's computational power is limited. 

In addition to the verifier and provers, a quantum refereed game consists of a protocol that 
dictates the number and order of turns taken by the provers. The circuits in the verifier's and 
provers' sequences are applied to the initial state in which each qubit is in state 1 0) in such a way 
as to implement the protocol of the game. 

The games we study in this paper have the following protocol: a message from the yes-prover 
to the verifier, a message from the verifier to the no-prover, and a message from the no-prover 
the the verifier. Quantum refereed games that follow this protocol will be called short quantum 
games. We note that entanglement between the provers and the verifier is immaterial in games 
of this form — each prover takes only one turn, and thus has no need to remember anything after 
his turn ends. Thus, when convenient, we may assume that the provers do not have private qubits 
but instead may perform arbitrary admissible quantum operations (i.e., completely positive trace- 
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preserving maps) on their message qubits. 

We now define the complexity class SQG based on short quantum games of the type just de- 
scribed. For c, s : N — > [0, 1], the set SQG(c, s) consists of all languages L C £* for which there 
exists a verifier V for a short quantum game such that the following conditions hold: 

1. There exists a yes-prover Y such that, for all no-provers iV and all x E L, Y(x) convinces 
V(x) to accept x with probability at least 1 — c(|x|); and 

2. There exists a no-prover N such that, for all yes-provers Y and all x £ L, N(x) convinces 
V(x) to reject x with probability at least 1 — s(|x|). 

The functions c and s are called the completeness error and soundness error, respectively. We write 
SQG to denote the class of all languages L C S* such that L E SQG(e, e) for every £ E 2~ poly . 

The class QIP contains all problems having single-prover quantum interactive proof systems 
as in Ref. [fl~3l . The main complexity-theoretic result of the present paper states that QIP C SQG. 
We prove this result by exhibiting a short quantum game that solves a promise problem called the 
CLOSE-IMAGES problem, which is known to be complete for QIP lfP3l . It is convenient for us to 
use the formulation of this problem based on the one found in Ref. lTl9l . 

The promise problem CLOSE-IMAGES is defined for any desired e E 2~ poly as follows. Given 
are descriptions of two mixed-state quantum circuits Q and Q lf which both implement some 
admissible transformation from n qubits to m qubits. The promise is that exactly one of the 
following conditions holds: 

1. There exist n-qubit mixed states p and p\ such that Qo(Po) — Qi(pi)> or 

2. For all n-qubit mixed states p and pi, the states Qo(Po) an d Qi(pi) have fidelity squared at 
most e(n). 

In other words, the images of Qo and Q\ are either overlapping or are far apart. The goal is to 
accept when case 1 holds and reject when case 2 holds. 

3 Distinguishing Convex Sets of Quantum States 

We motivate discussion in this section by pointing out that, for any mixed-state quantum circuit Q, 
the image A = {Q(p) : p a mixed state} of the admissible transformation associated with Q is a 
compact, convex set of mixed states. If the images of two circuits Qo and Q\ are far apart, then one 
could reasonably hope that there is a quantum measurement that reliably distinguishes between 
outputs Qo(po) and Qi(pi) of these transformations, with the measurement depending only on Q 
and Qi, and not on the choice of input states p and p\. In this section we prove that indeed there 
always exists such a measurement. More generally, we prove that given any two disjoint convex 
sets of mixed quantum states, there exists a single measurement that distinguishes states drawn 
arbitrarily from one set from the other with success probability determined by the minimal trace 
distance between the sets. The short quantum game for the CLOSE-IMAGES problem we define in 
Section |4]relies upon the existence of such a measurement. 
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Let us first begin with some notation. Given a finite dimensional Hilbert space TC, let L(TC) 
denote the set of all linear operators on H, let H(7Y) denote the set of all Hermitian operators on H, 
let Pos(7Y) denote the set of all positive semidefinite operators on H, and let D(7Y) denote the set 
of all density operators (i.e., unit trace positive semidefinite operators) on H. For A, B E L(7i), 
define (A, B) = tr A^B. This is an inner product on L(7i) that is sometimes called the Hilbert- 
Schmidt inner product. 

For a vector \ip) E H, \\ \ip) || denotes the Euclidean norm of For an operator A E L(7i), 
the operator norm of A, denoted || A ||, is defined by 

\\a\\ !W>! 

II A || = sup . 

|^>GH\{0} 

The trace norm of A, denoted ||v4|| tr , is defined by ||A|| tr = tr V A^A. The trace norm and the 
operator norm are dual to one another with respect to the Hilbert-Schmidt inner product, meaning 
that the following fact holds. 

Fact 1. For every A E L(H), 

\\A\\ = max{\(B,A)\ :BeL(H), \\B\\ ti <l}, 
\\A\\ tr = max{\(B,A)\ : B E L(H), ||S||<1}. 

See, for instance, Bhatia |5 1 for a proof of this fact. 

The trace norm characterizes the distinguishability of a given pair of density matrices p , p\ E 
D(7i) in the following sense. There exists a binary- valued quantum measurement such that if 
p E {po,Pi} is chosen uniformly at random, then the measurement correctly determines which 
of po or pi was given with probability | + \\\po _ Pilltr- Furthermore, such a measurement is 
optimal in the sense that no other quantum measurement can possibly distinguish between p an d 
pi with a higher success rate. An immediate corollary of this fact is that for a given pair p and pi, 
there exists a measurement that correctly identifies a chosen state p E {po, pi} with probability of 
correctness at least 1 1| p — pi || tr , even if p is chosen by an adversary that knows the measurement. 

Consider the following variant of the distinguishability problem: We are given p E D(7i) 
chosen from one of two disjoint convex sets of density operators Ao,Ai C D(H), and we are 
asked to determine the set from which p was chosen. For simplicity we will assume Ao and A\ 
are closed sets. Under this assumption, it is meaningful to define the trace distance dist(^4o) ^1) 
between Aq and A\ as the minimum of the quantity ||p — p 1 || tr over all choices of p E Ao and 
Pi E A\. We prove that there exists a single measurement with the property that if an arbitrary p 
is chosen from Ao with probability 1/2, and otherwise p is chosen from A\, then the measurement 
correctly determines which set p was chosen from with probability at least | + \ dist (^4 0) • This 
fact therefore generalizes the fact concerning a single pair of quantum states mentioned above, as 
singleton sets are of course closed and convex. As above, this fact implies that if p is chosen from 
Ao U A\ in an arbitrary manner, even depending on the measurement itself, then the measurement 
will correctly determine from which of Ao or Ai the state p was chosen with probability at least 
±dist(A),»4i)- 
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The proof of this fact begins with a well-known result from convex analysis, which informally 
states that there exists a separating hyperplane between any two disjoint convex sets. Typically, 
the separation result is stated in terms of the vector space M. n , but it translates to H(7i) for a 
given space TC without complications, as H(7i) may be identified with the vector space M m , 
for m = dim(7i). Here we state a restricted variant of this fact that is most convenient for our 
purposes — see Rockafellar fT%l . for instance, for a more general statement. 

Fact 2. Let A,BC H(7i) be disjoint convex sets with A compact and B open. Then there exists a 
Hermitian operator H G H(7i) and a real number aeK such that (H,X) > a > (H, Y) for all 
X G A and Y E B. 

We are now ready to state and prove the main result of this section. 

Theorem 3. Let Aq,A\ C D(7i) be closed convex sets of density operators. Then there exist 
measurement operators E Q , E\ G Pos(7i) with Eq + E\ = I such that the following holds. For 
every pair p Q G Ao and p\ G A\, if p is chosen uniformly from {po, Pi} and measured via the 
measurement {Eq, E\], the measurement will correctly determine whether p G Aq or p G A\ with 
probability at least \ + \ dist(^4 0) At)- 

Proof. Let d = dist(^4 , A\). If d = 0, the theorem is trivially satisfied by the measurement 
defined by Eq = E\ = \l (which is equivalent to a random coin-flip), so assume that d > 0. Let 

A = A - A\ = {po - pi : po G Ao, pi G A}- 

Then A is a compact convex set of Hermitian operators and || X || tr > d for every X G A. Let 

B = {YeU(H):\\Y\\ tI <d} 

denote the open ball of radius d in H(7i) with respect to the trace norm. The sets A and B satisfy 
the conditions of Fact El and therefore there exists a Hermitian operator H G H(7^) and a real 
number a G M such that (H, X) > a > (H, Y) for all X G A and Y G B. Because Y G B if and 
only if — Y G B for every Y, it follows that —a < a, and therefore a > 0. 

Let K = ±H. We therefore have that (K, X) > d for every X £ A and (K, \Y) < 1 for 
every Y G B. As ^Y ranges over all Hermitian operators with trace norm smaller than 1, this 
implies \\K\\ < 1 by Fact[TJ Now, let K + , K~ G Pos(7Y) denote the positive and negative parts 
of K, meaning that they satisfy K = K + — K~ and (K + , K~) = 0. As \\K\\ < 1 it follows that 
K+ + K- <I. 

At this point we define E , E\ G Pos(7i) as follows: 

E = K + + ^(I-K + -K-) and E x = K~ + -{I - K + - K~). 

The operators E and Ei are both positive semidefinite and satisfy E + E x = I, and therefore 
represent a binary- valued POVM. 
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Now suppose p G -A) an d Pi G -4.1 are chosen arbitrarily, and p is chosen uniformly from the 
set {po, Pi}- Let C denote the event that the measurement {E , E{\ correctly determines which of 
p and pi was selected. We have Pr[C] = \{E , p ) + \{E\, pi), and therefore 

Pr[C] - PrhC] = 1 -{E G - E 1 ,p - Pl ) = ±{K,p - Pl ) > ± 

with the inequality following from the fact that p — pi G A Consequently the measurement is 
correct with probability at least ~ + ~ as required. □ 



4 A Short Quantum Game for Q I P 

In this section, we prove that any language with a quantum interactive proof system also has a short 
quantum game by solving the QlP-complete problem CLOSE-IMAGES from Sectional 

First, let us recall that the fidelity F(p, £) between two quantum states p, £ E D(7Y) is defined 
as F(p, £) = ||\/P\/£|| t • The following fact, proved by Fuchs and van de Graaf ifTOll . gives one 
relationship between the fidelity and the trace norm. 

Fact 4. Let p,£ G T>(H). Then 

1 - \\\P ~ elk < F(p, < ^l-I||p-e||t,. 

We are now ready to state and prove the main result of this section. 
Theorem 5. QIP C SQG (l/2,2- poly ). 

Proof. It suffices to show that CLOSE-IMAGES is in SQG(l/2, 2~ poly ). Suppose the input encodes 
mixed state quantum circuits Q and Qi, each mapping n qubits to m qubits. Let H and K, be 
Hilbert spaces with dimensions 2 n and 2 m corresponding to the n input qubits and m output qubits 
respectively. We may view Q and Q\ as corresponding to admissible transformations Q , Qi : 
~D(H) ->!>(£.). Let A = {Qi(p) '■ P G D(H)} C D(/C) denote the image of Qi for z = 0, 1. 
The sets ^4o and A\ are closed, convex sets of density operators. 
Consider the following verifier for a short quantum game: 

1 . Receive n-qubit registers X and Xi from the yes-prover. 

2. Choose % E {0, 1} uniformly at random and apply Qi to register Xj. Let the output be 
contained in an m-qubit register Y, which is then sent to the no-prover. 

3. Receive a classical bit b from the no-prover. Accept if b ^ i and reject if b — i. 

If (Qo,Qi) is a "yes" instance of CLOSE-IMAGES then there exist po,pi G D(7Y) such that 
Qo(po) = Qi(pi)- The strategy for the yes-prover is to prepare the registers X and Xi in states p 
and pi, respectively, and to send them to the verifier in step 1 of the verifier's protocol. Because 
Qo(Po) — Qi(pi). tne state contained in the register Y is independent of i, so the no-prover can do 
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no better than randomly guessing in step 3. The verifier will therefore accept with probability 1/2 
in this case. 

If (Qo,Qi) is a "no" instance of CLOSE-IMAGES then for any desired e £ 2~ poly we are 
promised that 

^/e{nj > max {F(Qo(£o), Qi(fi))} > 1 - I dist(A, A)- 

It follows that dist(A, Ax) > 2 - 2y / e(n). 

Regardless of the state of the registers X and X x sent to the verifier by the yes-pro ver, we 
must have that the reduced state of the register Y sent to the no-prover is given by some state 
£ £ Ao U Ax, and moreover that Pr[£ £ A ] = Pr[£ £ Ai] = 1/2. By Theorem |3] there exists 
a quantum measurement {E , E{\ that correctly determines whether p £ Aq or p £ Ax with 
probability at least 

The strategy for the no-prover is to perform the quantum measurement {E , E{\ and send the result 
to the verifier in step 3. This causes the verifier to reject with probability at least 1 — y/e{n)/2. As 
this argument holds for every e £ 2~ poly , we have that the soundness error is 2~ poly as required. □ 

5 Error Reduction 

Suppose that both the completeness and soundness error c and s of a refereed game are bounded 
below 1 /2 by an inverse polynomial. Then it follows from Chernoff bounds that these error prob- 
abilities can be made exponentially close to zero by repeating the game a polynomial number 
of times in succession and taking a majority vote. Of course, sequential repetition necessarily in- 
creases the number of turns in the game and so it is natural to ask if error reduction can be achieved 
without affecting the turn complexity of the game. 

A natural approach to this task is to run many copies of the refereed game in parallel and to 
accept or reject based on the outcomes of the repetitions. This technique is purely classical and 
has been successfully applied to classical single- and multi-prover interactive proof systems (see 
for example Ref. ifTol and the references therein). A potential problem with this technique is that 
the provers need not treat each repetition independently — they might try to correlate the parallel 
repetitions (or entangle them in the quantum case) in some devious way such that the completeness 
and/or soundness error does not decrease as desired. 

In the quantum setting, the general case of this problem has not been completely solved. But 
for three-message single-prover quantum interactive proof systems with zero completeness error, 
Ref. [13 1 proves that parallel repetition followed by a unanimous vote does indeed achieve the 
exponential reduction in soundness error that one might expect, regardless of any possible entan- 
glement by the prover among the parallel copies. 

In this section, we prove that parallel repetition followed by a unanimous vote can be used to 
improve the error bounds for short quantum games by reducing the problem to error reduction for 
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single-prover quantum interactive proof systems with three or fewer messages. The reduction is 
achieved by fixing a yes- or no-prover P that is guaranteed to win with a certain probability. By 
viewing the verifier-prover pair (V, P) as a new composite verifier, we are left with what is now 
effectively a one- or two-message quantum interactive proof system in which the opposing prover 
is the lone prover. We define a verifier-prover pair ( V, P') that runs many copies of (V, P) in 
parallel and accepts based on a unanimous vote. We can then employ the error reduction result 
of Ref. ifT^ll to prove that the error of the new game decreases exponentially in the number of 
repetitions. 

We formalize this argument shortly, but first we require additional notation. Given finite- 
dimensional Hilbert spaces H and /C, let h(7i, /C) denote the set of all linear operators mapping 
H to /C and let T(H, K) denote the set of all linear operators mapping the vector space L(TC) to 
L(/C). The trace norm can be extended to T(H, K) as follows. For T 6 T(H, K), 



\\nx)\\ tT 



\T\\. = sup 



XGL(W)\{0} H^lltr 

Let £ be a Hilbert space with dim(£) = dim(7Y) and let Iun denote the identity transformation on 
L(£). Then for T e T(H, K), the diamond norm \\T\\ of T is given by ||T|| = ||T ® I h(c) || tr . 
Further information on the diamond norm may be found in Kitaev, Shen, and Vyalyi |12|. The 
diamond norm satisfies several nice properties that the trace norm (extended to T(TC, /C)) does not. 
The diamond norm is multiplicative with respect to tensor products: \\Ti ® T 2 \\ = ||Ti \\ \\T 2 1| 
for any choice of transformations 7\ and T 2 . 

We are now prepared to give the main result of this section, whose proof is based on the proof 
of Theorem 6 of Ref. P . 

Theorem 6. SQG(c, s) C SQG(£;c, s k ) n SQG(c fc , ks) for any choice of c,s : N — >• [0, 1] and 
k G poly. 

Proof. We first prove that SQG(c, s) C SQG(A;c, s k ). Let L e SQG(c, s) and let V{x) = (V(x)x, 
V(x) 2 ) be a verifier witnessing this fact. For the remainder of this proof, we assume that the input 
x E E* is fixed. For brevity we drop the argument and write V = (Vi, V 2 ) and use similar notation 
for the provers. 

Let V = (Vf' k , V 2 k ) be a verifier that runs k copies of the protocol of V in parallel and accepts 
if and only if every one of the k copies accepts. We must show that V has completeness error at 
most kc and soundness error at most s k . 

First consider the case x E L. Let Y = (Yi) be a yes-prover that always convinces V to accept 
with probability at least 1 — c. Let Y' = (Y 1 0fc ) be a yes-prover that runs k independent copies of 
the protocol of Y in parallel. Then no no-prover can win any one of the k copies with probability 
greater than c and so by the union bound we know that the completeness error of the repeated game 
is at most kc. 

Next consider the case x E" L. Let iV = (Ni) be a no-prover that always convinces V to reject 
with probability at least 1 — s. Let N' = (Nf k ) be a no-prover that runs k independent copies of 
the protocol of iV in parallel. We now show that no yes-prover can win against N' using verifier 
V with probability greater than s k . 
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Let n init denote the projection of the entire system onto the all- 1 ) initial state. Then the pro- 
jection U.' init = n®f t corresponds to the initial state of the repeated game. Let Il acc denote the 
projection onto the states for which the output qubit belonging to V is 1. Then the projection 
n' acc = II® ^ corresponds to the accepting state of V. Let Vn denote the Hilbert space correspond- 
ing to the private qubits of V and the private and message qubits of N and let M. Y denote the 
Hilbert space corresponding to the yes-prover's message qubits. Define T N G T(Vat ® My, My) 
as 

T N (X)=ti VN (Tl init )X(Tl acc V 2 N 1 V 1 ). 

As mentioned earlier, we may view (V, N) as a new composite verifier and the yes-prover as 
the lone prover for some one-message quantum interactive proof system (i.e., a message from the 
prover to (V, N)). In this context, Lemma 7 of Ref. 1~j~3l asserts that the maximum probability 
with which any prover could convince the verifier (V, N) to accept x is precisely II Tjv |L . Because 
(V, N) has soundness error at most s, we have ||T/v || < s. 

Define a similar transformation T' N G T((V N <g> M Y ) m Mf k ) using V, N', W init , and n' acc . 
It follows that T' N = T® k . From the multiplicativity of the diamond norm, it follows that the 
maximum probability with which any prover could convince (V',N r ) to accept x is 

\\rpl ||2 _ ||/Ti®fc||^ \\rp \\2k ^* k 

II 2 n Wo - || 2 n || - Mat Ho - s > 

which establishes the desired result. 

Due to the symmetric nature of quantum refereed games, we can modify the above proof to 
show that SQG(c, s) C SQG(c fc , ks). In particular, define the verifier V" so that he rejects if and 
only if all k copies reject. For the case x G" L, the proof that V" has soundness error ks is 
completely symmetric to the proof that V' has completeness error kc. 

For the case x G L, we let Y and Y' be yes-players as above. Define the Hilbert spaces Vy and 
M. n and the projections il re j and nj. ej in the appropriate symmetric manner as per the above proof. 
The transformation T Y G T(Vy ® Mn-,M.n) is defined as 

t y (x) = tr Vy (vir 1 n init )x(n rcj \/ 2 ). 

As before, we may view (V, Y) as a new composite verifier and the no-prover as the lone prover 
for some quantum interactive proof system. The differences here are that the quantum interactive 
proof is now a two-message proof instead of a one-message proof (i.e., a message from (V, Y) to 
the prover followed by the prover's reply to (V, Y)) and that the prover's goal is now to convince 
the verifier (V, Y) to reject x instead of to accept x. 

Fortunately, it is still straightforward to apply Lemma 7 of Ref. lfT3l to this quantum interactive 
proof system and so we may claim that the maximum probability with which any prover could 
convince the verifier (V,Y) to reject x is precisely ||Ty||^. That V" has completeness error c k 
follows as before. □ 

The proof of Theorem[6]can be extended to allow for the slightly more general protocol wherein 
the verifier sends a message to the yes-prover (via some circuit Vi nit ) before the short quantum game 
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commences. This extension follows from the fact that we can apply Lemma 7 of Ref. to the 
augmented transformations 

t n (x) = tr Vjv (Mnitn in i t )x(n acc y 2 7V 1 y 1 ), 
t y (x) = tr Vy (viy 1 vi nit n iIlit )x(n rej i/ 2 ). 

Combining Theorems |5] and |6] we obtain the following corollary, which is the main result of 
this paper. 

Corollary 7. QIP C SQG. 

Proof. Given a desired error bound 2~ p where p E poly, choose e G 2 _po ^ so that pe < 2~ p . We 
have QIP C SQG (1/2, e) C SQG (2~* 2~ p ) . □ 



6 Conclusion 

We introduced in this paper the quantum refereed game model of computation and gave a short 
quantum game with exponentially small error for languages with single-prover quantum interactive 
proof systems. However, we have only scratched the surface of the quantum games model, and 
many questions about it remain unanswered. Some examples follow. 

• The two-turn game presented in this paper has an asymmetric protocol. Is there also a two- 
turn quantum refereed game for QIP in which the no-prover sends the first message, or in 
which the provers play one turn in parallel? 

• It is known that QIP C EXP. How does SQG relate to EXP? 

• We mentioned in Section[TJthat classical refereed games characterize EXP J6), which implies 
that many-turn quantum refereed games are at least as powerful as EXP. What upper bounds 
can be proved on the power of refereed quantum games? 

• We demonstrated that parallel repetition followed by a unanimous vote can reduce error for 
short quantum games. Is there a way to reduce the error in any quantum refereed game 
without affecting the number of turns in the game? 
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